Security Affairs

DECEMBER 19, 2024

Fortinet warns of a patched FortiWLM vulnerability that could allow admin access and sensitive information disclosure. Fortinet warned of a now-patched Wireless LAN Manager (FortiWLM) vulnerability, tracked as CVE-2023-34990 (CVSS score of 9.6), that could lead to admin access and sensitive information disclosure. through 8.6.5

Authentication 264

Authentication Access Education IT 264

Security Affairs

FEBRUARY 16, 2025

Storm-2372s targets during this time have included government, non-governmental organizations (NGOs), information technology (IT) services and technology, defense, telecommunications, health, higher education, and energy/oil and gas in Europe, North America, Africa, and the Middle East.” ” continues the report.

Phishing 287

Phishing Authentication Access Government 287

Krebs on Security

DECEMBER 3, 2021

Rarely do cybercriminal gangs that deploy ransomware gain the initial access to the target themselves. More commonly, that access is purchased from a cybercriminal broker who specializes in acquiring remote access credentials — such as usernames and passwords needed to remotely connect to the target’s network.

Access 349

Access Ransomware Passwords Sales 349

Krebs on Security

OCTOBER 14, 2021

Louis Post-Dispatch ran a story about how its staff discovered and reported a security vulnerability in a Missouri state education website that exposed the Social Security numbers of 100,000 elementary and secondary teachers. Louis Post-Dispatch for reporting a security vulnerability that exposed teacher SSNs.

Security 342

Security Education Computer and Electronics Access 342

Security Affairs

APRIL 25, 2023

A brand, best known for its lion roaring for over a century, has leaked access to its user data in Peru. And while the country is not that big of a market for the car maker, this discovery is yet another example of how big and well-known brands fail to secure sensitive data. env) hosted on the official Peugeot store for Peru.

Access 246

Access Education Encryption Passwords 246

Security Affairs

APRIL 5, 2025

The ransomware gang hit organizations in multiple industries, including education, healthcare, manufacturing, information technology, and government sectors. While our response and recovery are still ongoing, we wanted to share updated information about what happened, what we have been doing, and how we are further strengthening our security.

Data breaches 175

Data breaches Ransomware Manufacturing Education 175

Security Affairs

NOVEMBER 19, 2024

“According to the indictment, Ptitsyn facilitated the worldwide use of a dangerous ransomware strain to target corporations and various organizations, including government agencies, healthcare facilities, educational institutions, and critical infrastructure.

Ransomware 288

Ransomware Education Sales Government 288

Security Affairs

MAY 27, 2022

The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. The FBI has observed incidents of stolen higher education credential information posted on publically accessible online forums or listed for sale on criminal marketplaces.

Sales 363

Sales Education Phishing Passwords 363

OpenText Information Management

NOVEMBER 27, 2024

But before then, we’ll be sharing proprietary research from the upcoming State of Secure Information Management where we explore strategies to enable secure access and protect sensitive data. This presents an opportunity for education and training programs in the industry. We look forward to sharing the rest.

Access 59

Access Security Data Privacy Compliance 59

Security Affairs

FEBRUARY 6, 2025

The man is accused of multiple crimes, including the discovery and disclosure of secrets, illegal access to computer systems, computer damage and money laundering. “ At the international level, there has been collaboration with EUROPOL and the Homeland Security Investigations (HSI) of the USA.”

Data breaches 201

Data breaches Information Security Government Access 201

Krebs on Security

FEBRUARY 22, 2022

Missouri Governor Mike Parson made headlines last year when he vowed to criminally prosecute a journalist for reporting a security flaw in a state website that exposed personal information of more than 100,000 teachers. Louis Post-Dispatch for reporting a security vulnerability that exposed teacher SSNs. In October 2021, St.

Education 358

Education Access Security Communications 358

Security Affairs

AUGUST 6, 2024

Hackers breached the mobile device management (MDM) firm Mobile Guardian, the company detected unauthorized access to iOS and ChromeOS devices on August 4th. The Ministry of Education (MOE) in Singapore confirmed that the incident heavily impacted students in the country. ” reported the MOE.

MDM 357

MDM Education Access Security 357

Security Affairs

JUNE 24, 2021

. “These actors are utilizing advanced knowledge of enterprise networking and security misconfigurations to achieve lateral movement and gain access to the victim’s environments.” The malware was recently employed in attacks against large US schools and education organizations. . Pierluigi Paganini.

Ransomware 362

Ransomware Education Cybersecurity Government 362

Security Affairs

NOVEMBER 11, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 321

Security Ransomware Data breaches Marketing 321

Security Affairs

APRIL 12, 2023

SAP April 2023 security updates include a total of 24 notes, 19 of which are new vulnerabilities. CVE-2023-28765 : An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) – versions 420, 430, can exploit the issue to access to lcmbiar file and further decrypt the file.

Security 246

Security Education Passwords Authentication 246

Security Affairs

JULY 7, 2024

Every week the best security articles from Security Affairs are free in your email box. GootLoader is still active and efficient Hackers stole OpenAI secrets in a 2023 security breach Hackers leak 170k Taylor Swift’s ERAS Tour Barcodes Polyfill.io A new round of the weekly SecurityAffairs newsletter arrived!

Data breaches 303

Data breaches Security Mining Education 303

Security Affairs

NOVEMBER 13, 2024

The group managed to maintain access without being detected for as long as possible. In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. and Guam without being detected.

e-Discovery 308

e-Discovery Communications Ransomware Government 308

Security Affairs

SEPTEMBER 24, 2023

educational nonprofit organization National Student Clearinghouse disclosed a data breach that impacted approximately 900 US schools. The security breach resulted from a cyber attack exploiting a vulnerability in the MOVEit managed file transfer (MFT).- The issue occurred on or around May 30, 2023.”

Data breaches 340

Data breaches Education Ransomware Cybersecurity 340

Security Affairs

OCTOBER 9, 2021

CyberNews researchers found an exposed configuration file hosted on a Sky.com subdomain, containing what appear to be production-level database access credentials, as well as addresses to development endpoints. Access to the configuration file has now been disabled. Who had access? Original post @ [link].

IoT 354

IoT Access Ransomware Education 354

eSecurity Planet

DECEMBER 4, 2024

Microsoft recently announced that they’re making changes to their Windows operating system to improve security and reliability. During the Ignite 2024 conference, Microsoft announced the Windows Resiliency Initiative to address these security concerns.

Security 108

Security Phishing Encryption Passwords 108

Security Affairs

APRIL 3, 2023

Western Digital disclosed a security breach, according to the company an unauthorized party gained access to multiple systems. Western Digital has shut down several of its services after discovering a security breach, the company disclosed that an unauthorized party gained access to multiple systems.

Security 246

Security IT Cloud Ransomware 246

Security Affairs

OCTOBER 30, 2021

MITRE and the DHS’s Cybersecurity and Infrastructure Security Agency (CISA) have announced the release of the “2021 Common Weakness Enumeration (CWE) Most Important Hardware Weaknesses” list. CIOs and security managers could also use the list to assess the efficiency of their program to secure hardware within in their organizations.

Manufacturing 364

Manufacturing Access Education Security 364

Security Affairs

SEPTEMBER 18, 2024

This mode limits the user’s ability to close the browser or access other applications, making it easier for hackers to obtain the desired information. Why and how to protect ourselves Once the credentials are stolen, hackers can use them to access various online accounts, including banking, e-mail, and social media accounts.

Passwords 318

Passwords Authentication Education Phishing 318

Security Affairs

MAY 26, 2021

“Urgent action was taken to prevent the attacker’s access” Maerens said. . Belnet (or the Belgian National research and education network ) is a Belgian internet provider for educational institutions, research centres, scientific institutes, and government services. Pierluigi Paganini.

IT 334

IT Education Government Communications 334

Security Affairs

APRIL 25, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. National Security Agency and Microsoft addressed it with the release of Microsoft October 2022 Patch Tuesday security updates.

IT 353

IT Education Cybersecurity Risk 353

Security Affairs

MARCH 5, 2025

Microsoft reported that China-linked APT group Silk Typhoon has shifted tactics to target IT solutions like remote management tools and cloud apps for initial access. Though not directly attacking Microsoft cloud services, they exploit unpatched apps to escalate privileges and gain access to customer networks.

Energy and Utilities 157

Energy and Utilities IT Cloud Passwords 157

Security Affairs

MAY 26, 2022

Security researchers released PoC exploit code for the critical authentication bypass vulnerability CVE-2022-22972 affecting multiple VMware products. The CVE-2022-22972 flaw affects Workspace ONE Access, VMware Identity Manager (vIDM), and vRealize Automation. reads the advisory published by the company. “A Searching on Shodan.io

Authentication 361

Authentication Cybersecurity Access Education 361

Security Affairs

NOVEMBER 12, 2023

The security breach took place in the State between May 28, 2023, and May 29, 2023. The software vulnerability was exploited by a group of cybercriminals and allowed them to access and download files belonging to certain agencies in the State of Maine between May 28, 2023, and May 29, 2023.” million individuals. percent and 26.0

Data breaches 352

Data breaches Insurance Education Cybersecurity 352

Security Affairs

APRIL 7, 2023

Multinational IT corporation MSI (Micro-Star International) confirms security breach after Money Message ransomware gang claimed the hack. Today MSI confirmed the security breach, it confirmed that threat actors had access to some of its information service systems. ” reads a statement published by the company.

Ransomware 246

Ransomware Security Manufacturing Cybersecurity 246

Security Affairs

SEPTEMBER 6, 2023

A Reddit user with the handle ‘Educational-Map-8145’ published a proof of concept exploit for a zero-day flaw in the Linux client of Atlas VPN. “The client does not connect via a local socket or any other secure means but instead it opens an API on localhost on port 8076. It does not have ANY authentication.

Education 345

Education Authentication Cybersecurity IT 345

Security Affairs

SEPTEMBER 8, 2023

Cisco warns that a zero-day vulnerability (CVE-2023-20269) in Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) is actively exploited by ransomware groups to gain initial access to corporate networks. The group now is targeting Cisco VPN products to gain initial access to corporate networks. or earlier).

Ransomware 363

Ransomware Authentication Access Education 363

Security Affairs

FEBRUARY 28, 2023

Gmail client-side encryption (CSE) is now available for Workspace Enterprise Plus, Education Plus, and Education Standard customers. Google announced that Gmail client-side encryption (CSE) is now available for all Google Workspace Enterprise Plus, Education Plus, and Education Standard customers.

Encryption 246

Encryption Education Digital transformation Access 246

Security Affairs

APRIL 21, 2024

A joint advisory published by CISA, the FBI, Europol, and the Netherlands’ National Cyber Security Centre (NCSC-NL) revealed that since early 2023, Akira ransomware operators received $42 million in ransom payments from more than 250 victims worldwide. The attackers mostly used Cisco vulnerabilities CVE-2020-3259 and CVE-2023-20269.

Ransomware 352

Ransomware Encryption Education Phishing 352

Security Affairs

AUGUST 2, 2020

The FBI has issued a security alert about Netwalker ransomware attacks targeting U.S. The FBI has issued a new security flash alert to warn of Netwalker ransomware attacks targeting U.S. and foreign government organizations, education entities, private companies, and health agencies by unidentified cyber actors.”

Ransomware 363

Ransomware Encryption Passwords Government 363

Security Affairs

NOVEMBER 25, 2023

ransomfeed #security #infosec #energychina pic.twitter.com/deRRximVPd — Ransomfeed (@ransomfeed) November 25, 2023 The China Energy Engineering Corporation (CEEC) is a state-owned company in China that operates in the energy and infrastructure sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence.

Ransomware 357

Ransomware Manufacturing Education Libraries 357

Security Affairs

OCTOBER 26, 2023

It appears that some as-yet-unidentified party or parties gained unauthorized access to at least one of our servers. Threat actors gained access to the network of the company and stole some data from its systems. “We had previously announced on August 10, 2023, about the unauthorized access to our servers (*).

Data breaches 359

Data breaches Ransomware Personal data Cybersecurity 359

Security Affairs

OCTOBER 5, 2023

Cloud-based customer relationship management systems allow a business or another organization to manage interactions with customers, store documents or other important business data and allow them to access it from anywhere. The records inside the database were publicly accessible to anyone with an internet connection.

Data breaches 334

Data breaches B2B Education Access 334